27 matches found
Python Library OpenEXR 3.4.0 < 3.4.13 DoS (CVE-2026-53532)
The version of the OpenEXR Python package installed on the remote host is 3.4.x prior to 3.4.13. It is, therefore, affected by a denial of service vulnerability: - A crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted...
CVE-2026-54920
A flaw was found in OpenEXR. A remote attacker could exploit a reachable assertion failure in the HTJ2K decode path by providing a specially crafted HTJ2K-compressed EXR file. This file, containing a QCD marker with specific invalid bits, causes an unconditional process abort in applications that...
EUVD-2026-65182
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...
CVE-2026-54920
OpenEXR (reference implementation for the EXR image format, widely used in the motion picture industry) versions 3.4.0 through 3.4.12 contain a denial of service vulnerability in the HTJ2K decode path . A crafted HTJ2K-compressed EXR file with a QCD marker whose lower five bits are zero is passed...
CVE-2026-53532
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...
CVE-2026-53532
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...
CVE-2026-53532 OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...
CVE-2026-53532 OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...
CVE-2026-53532 OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...
EUVD-2026-65179
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...
CVE-2026-53532: Reachable Assertion
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...
FreeBSD : OpenJPH < 0.24.5 -- multiple vulnerabilities (77bac392-ba98-11f0-aada-f59a8ea34d12)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 77bac392-ba98-11f0-aada-f59a8ea34d12 advisory. Aous Naman reports several vulnerabilities fixed in OpenJPH versions up to 0.24.5 and credits Cary...
EUVD-2012-1089
Malware in sbrugna...
Oracle Outside In JPEG 2000 QCD Segment Processing Heap Buffer Overflow (CVE-2012-1769)
A remote code execution vulnerability has been reported in Oracle Outside-In...
Irfanview JPEG2000 4.3.2.0 jp2 Stack Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Irfanview JPEG2000 %q This modul...
XnView JPEG2000 Plugin Buffer Overflow Vulnerability (Windows)
This host has XnView installed and is prone to buffer overflow vulnerability. Vulnerabilities Insight: The flaw is due to an error in the JPEG2000 plugin in Xjp2.dll, when processing a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment. OpenVAS Vulnerabilities Test $Id:...
CVE-2012-1055: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...
CVE-2012-1052
Buffer overflow in IvanView 1.2.15 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...
CVE-2012-1052
CVE-2012-1052 affects IvanView 1.2.15, where a Buffer overflow in handling JPEG2000 (JP2) files with a crafted Quantization Default (QCD) marker segment allows remote code execution. The vulnerability arises from processing of the JP2 marker data, enabling an attacker to run arbitrary code on aff...
CVE-2012-1052: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in IvanView 1.2.15 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...